Privacy Policy

This Privacy Policy explains what information NovaWell Wellness, LLC collects, how we use it, and the choices you have. By using the site you agree to the practices described here. This policy works alongside our Terms and Conditions and Research Use Policy.

---

Information we collect

• Account information. When you apply for access we collect your email address and the researcher details you provide — name, organization, role, research focus, and any optional identifiers such as LinkedIn or ORCID.
• Eligibility attestations. We retain a permanent, immutable record of the attestations you affirm at sign-up, together with the date, time, IP address, and browser user-agent of submission. This record is a legal audit log and is not editable after creation.
• Order information. When you place an order we collect your shipping and billing addresses and order contents. Payment card details are handled by our payment processor; we do not store full card numbers.
• Usage data. We use privacy-first analytics (Plausible) and product analytics (PostHog) to understand how the site is used. Plausible does not use cookies and does not collect personal data.

How we use information

We use the information we collect to:

• Verify eligibility and operate your member account;
• Process, fulfill, and support your orders;
• Send transactional email (sign-up confirmation, order updates, COA delivery, restock alerts);
• Maintain the legal audit record required by our Research Use Policy;
• Detect and prevent fraud, abuse, and policy violations;
• Improve the site and our service.

We do not sell your personal information.

Authentication

We use a passwordless, magic-link sign-in. We do not store passwords. Sessions are held in secure, HTTP-only cookies managed by our authentication provider.

Sharing

We share information only with service providers who help us operate the site — payment processing, email delivery, hosting, database, and analytics — and only to the extent needed to perform those services. We may disclose information where required by law.

Data retention

The sign-up audit record is retained as a permanent legal record. Other personal data is retained for as long as your account is active and as required for legal, accounting, and fraud-prevention purposes.

Your choices

You may update your account details, manage restock notifications, and adjust communication preferences from your account settings. To request access to or deletion of your personal data (subject to records we are required to retain), contact us at the address below.

Contact

Questions about this policy can be sent to research@purplepeptide.com.